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Top Stories 

• A June 1 1 fire and propane tank explosion at a Bailey Farms International hay plant in 
Tremonton, Utah, caused between $8 million and $10 million in damage. - KSL 5 Salt 
Lake City (See item 8) 

• Officials at St. Joseph Health of Sonoma County in Santa Rosa, California, reported June 
12 that a thumb drive containing personal and medical information of 33,702 patients was 
stolen during a burglary at an outpatient radiology facility June 2. - KPIX 5 San Francisco 
(See item 18 ) 

• A researcher discovered a new trojan, Pandemiya, which contains about 25,000 lines of 
fresh code and has the ability to steal data from forms, take screen shots to send back to the 
botmasters who deploy it, and create fake web pages. - The Register (See item 21 ) 

• Time Warner Cable representatives reported its Road Runner email service was down 
affecting 10 percent of its customers in cities across the U.S. for several days, and stated 
that its engineers were working to restore service. - WLTX 19 Columbia (See item 25 ) 
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Energy Sector 



1. June 12, Salt Lake City Deseret News - (Utah) Oil tanker spills 4,000 gallons near St. 
George. An estimated 4,000 gallons of hot crude oil spilled when a semi-truck carrying 
about 6,000 gallons of crude crashed on Interstate 15 near St. George, Utah, June 11. 
HAZMAT crews responded to the scene and cleanup was expected to take a week. 
Source: http://www.deseretnews.com/article/865605017/Oil-tanker-spills-400Q- 
gallons-near-St-George.html 
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Chemical Industry Sector 

See items 6, 9, and 10 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. June 13, Reuters - (National) GM's safety crisis deepens with Camaro switch recall. 
General Motors announced June 13 a recall for 51 1,528 model year 2010 to 2014 
Chevrolet Camaros due to defective ignition switches that can turn off and cut power to 
vehicles when switchblade keys are used. Company officials stated the switch defect is 
an external bumping issue and is unrelated to a similar ignition switch failure in the 
Chevrolet Cobalt. 

Source: http://www.reuters.com/article/2014/06/13/us-gm-recall-camaro- 
idUSKBNQE01C620140613 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

3. June 13, The Register - (International) Hacker claims PayPal loophole generates 
FREE MONEY. A man turned white hat reported a loophole in PayPal’s system that 
can be exploited to earn free money by funneling cash into a mule account before filing 
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for a transaction refund. The company stated that the vulnerability is an issue with its 
protection policy and did not give additional information about its ability to prevent 
one-off instances of the scam. 

Source: 

http://www.theregister.co.uk/2014/06/13/hacker claims paypal loophole generates fr 
ee money/ 

For another story, see item 22 
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Transportation Systems Sector 

4. June 13, Associated Press - (New Jersey) Police identify driver killed in crash that 
closed GWB. The eastbound upper level lanes of the George Washington Bridge into 
New York was closed for several hours June 12 after two semi-trucks crashed on the 
bridge in Fort Lee, New Jersey, killing one driver and sending the other to an area 
hospital for injuries. 

Source: http://pixll.com/2014/06/13/police-identify-driver-killed-in-crash-that-closed- 
gwb/ 

5. June 12, KPHO 5 Phoenix - (Arizona) EB Loop 101 reopens after rollover crash in 
north Phoenix. The Arizona Department of Transportation closed a portion of Loop 
101 Pima Freeway eastbound in north Phoenix for nearly 4 hours June 12 after a 3- 
vehicle crash that left several people injured. 

Source: http://www.kpho.com/storv/25760331/crash-closes-eb-101-at-tatum-road-in- 
north-phoenix 

6. June 12, Associated Press - (Arizona) 1-8 near Yuma partially open after vehicle 
crash. Eastbound lanes of Interstate 8 near Yuma were reopened after several hours 
June 12 after a semi-truck carrying corrosive liquid caught fire sending one person to 
an area hospital with injuries. Westbound lanes remained closed while crews worked to 
clear the scene. 

Source: http://www.mvfoxphoenix.com/storv/25762593/i-8-near-vuma-partiallv-open- 
after-vehicle-crash 

7. June 12, Riverside Press-Enterprise - (California) Riverside: Four-vehicle crash 
closes Highway 91 lanes. The California Highway Patrol reported that 3 eastbound 
lanes of the 91 Freeway in Riverside were closed for about 2 hours June 12 due to a 4- 
vehicle crash that left several people injured. 

Source: http://blog.pe.com/breaking-news/2014/06/12/riverside-multiple-collisions- 
close-highway-91 -lanes/ 
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Food and Agriculture Sector 

8. June 12, KSL 5 Salt Lake City - (Utah) $10M hay fire 'going to burn for a long 
time,' fire marshal says. A fire broke out June 11 at a Bailey Farms International hay 
plant in Tremonton and spread to a propane tank outside the structure, causing an 
explosion that ignited piles of hay. Fire officials stated that the fire caused between $8 
million and $10 million in damage and that it is unlikely a cause will be determined due 
to size and intensity of the blaze. 

Source: http://www.ksl.com/?nid=148&sid=30280899 

9. June 12, U.S. Environmental Protection Agency - (Oregon) Wilco-Winfield, LLC, 
Oregon pesticide re-packager, settles with EPA for pesticide violations at its Mt. 
Angel facility. Wilco-Winfield, LLC entered into an agreement with the U.S. 
Environmental Protection Agency (EPA) and agreed to pay a $15,360 fine June 12 to 
settle alleged violations of federal requirements that mandate an adequate pesticide 
containment pad at the company’s Mt. Angel facility. The action was taken following a 
February 2013 inspection by the Oregon Department of Agriculture that was turned 
over to the EPA for review. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/c04a8 

85e0aeeef3585257cf60000787b!QpenDocument 

10. June 12, U.S. Environmental Protection Agency - (Idaho) McGregor Company’s 
Nezperce, ID, facility nets EPA penalty for pesticide violations. The McGregor 
Company agreed June 12 to pay a $24,720 penalty as part of a settlement with the U.S. 
Environmental Protection Agency (EPA) to resolve alleged violations of the Federal 
Insecticide, Fungicide, and Rodenticide Act at its Nezperce, Idaho facility. A March 
2013 EPA inspection found the facility allegedly lacked required protections for its 
pesticide repacking equipment and lacked an adequate pesticide containment pad. 
Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/b8e03 

e530afa4efe85257cf50082948c!QpenDocument 

11. June 12, Huntsville Times - (Alabama) Health officials investigating possible 
salmonella outbreak in Russellville. The Alabama Department of Public Health is 
investigating a possible foodbome outbreak in Russellville after three individuals tested 
positive for Salmonella cultures, while an additional nine cases are undergoing 
examination. The department is searching for the source of the outbreak, and stated that 
the confirmed cases were likely contracted between June 4 and 5. 

Source: 

http://www.al.com/news/huntsville/index.ssf/2014/06/health officials investigating.ht 
ml 

12. June 12, Food Poisoning Bulletin - (Minnesota) Crazy Cow Creamery products 
contain undeclared allergens. The Minnesota Department of Agriculture issued a 
consumer advisory warning that three Crazy Cow Creamery products sold at the 
company’s on-site retail store in Blue Earth, Minnesota, contain undeclared allergens. 
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The listed products were Ranch Cheese Curds that contain undeclared soy, Vanilla Ice 
Cream that contains undeclared milk, and Oreo Ice Cream that contains undeclared 
milk, wheat, and soy. 

Source: http://foodpoisoningbulletin.com/2014/crazv-cow-creamery-products-contain- 
undeclared-allergens/ 

13. June 12, Food Safety News - (California) California company recalls pickled 
products due to possible Botulism risk. The California Department of Public Health 
advised consumers June 12 against eating Healdsburg Pickling Company jarred pickles, 
pickled green beans, and pickled carrots due to the possibility the products were not 
produced properly and are susceptible to Clostridium Botulinum contamination. The 
products were sold in quart and pint glass jars at two California stores. 

Source: http://www.foodsafetvnews.com/2014/06/california-company-recalls-pickled- 
products-for-possible-botulism-risk 

14. June 12, U.S. Food and Drug Administration - (Connecticut; Massachusetts) Fish 
Family Farm, Inc. issues allergy alert on milk products and cream due to potential 
peanut and tree nut contamination. Fish Family Farm, Inc., issued a recall for some 
Shadow Valley Farms and Fish Family Farm Inc. branded dairy products, including 
milk and cream, due to the possibility they may be adulterated with peanut and tree nut 
allergens. The products were distributed at Fish Family Farm’s Bolton, Connecticut 
retail store, and at retail stores in Connecticut and Massachusetts. 

Source: http ://w w w.fda. gov/S afety/Recalls/ucm40 1013 .htm 
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Water and Wastewater Systems Sector 

15. June 12, Associated Press - (West Virginia) W.Va. utility replaces all filters after 
spill. West Virginia American Water announced June 12 that all filters in its water 
distribution system were replaced and that the system was cleared of all chemicals from 
a January spill. The spill prompted the utility to remove all tainted filters and caused a 
nearly 10-day tap- water ban for Charleston. 

Source: http://www.greenwichtime.com/news/science/article/W-Va-utilitv-replaces-all- 
filters- after- spill-5548616, php 

16. June 12, WSB 2 Atlanta - (Georgia) 100 customers lose water due to punctured 
utility line. Water service to about 100 businesses and residences in Johns Creek was 
restored June 12 when a 12-inch water main was repaired after it was punctured by 
contractors installing fiber optic lines in Fulton County. 

Source: http://www.wsbtv.com/news/news/local/100-customers-lose-water-due- 
punctured-utility-lin/ngKLr/ 
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Healthcare and Public Health Sector 



17. June 13, KJRH 2 Tulsa - (Oklahoma) Police standoff with suicidal subject over after 
lockdown at Saint Francis Hospital emergency room. The emergency room at Saint 
Francis Hospital in Tulsa was locked down for 3 hours June 13 while police officers 
attempted to communicate with a man parked outside the entrance with a gun. Officers 
took the man into custody without incident. 

Source: http://www.kirh.com/news/local-news/police-standoff-with-suicidal-subiect- 
prompts-lockdown-for-saint-francis-hospital-emergency-room 

18. June 12, KPIX 5 San Francisco - (California) Records of more than 33,000 patients 
stolen from Santa Rosa radiology facility. Officials at St. Joseph Health of Sonoma 
County in Santa Rosa reported June 12 that a thumb drive containing X-ray records of 
33,702 patients was stolen during a burglary at an outpatient radiology facility June 2. 
Patients’ personal information was saved on the thumb drive which was taken from a 
staff member’s storage locker. 

Source: http://sanfrancisco.cbslocal.com/2014/06/12/records-of-more-than-33000- 
patients-stolen-from-santa-rosa-radioligy-facility/ 
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Government Facilities Sector 

19. June 12, KB1A 91.3 FM Columbia - (Missouri) SUV driver dead, three children 
rushed to hospital in Columbia school bus accident. A bus driver and 22 students 
from Two Mile Prairie Elementary School were transported to area hospitals after an 
SUV collided with a Two Mile Prairie school bus in Columbia, Missouri, June 12. 
Source: http://kbia.org/post/suv-driver-dead-three-children-rushed-hospital-columbia- 
school-bus-accident 

20. June 12, WEWS 5 Cleveland - (Ohio) Canton Police investigating after 18 school 
bus batteries stolen. Authorities are investigating after 18, 24- volt batteries were 
removed from Canton City School buses the week of June 9 when thieves cut through a 
barb-wired fence and entered the Canton property. 

Source: http://www.newsnet5.com/news/local-news/oh-cuyahoga/canton-police- 
investigating-after-18-school-bus-batteries-stolen 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 



21. June 13, The Register - (International) Entirely new trojan quietly wheeled into 
black hat forums. A researcher from RSA reportedly discovered a new trojan, 
Pandemiya, which contains about 25,000 lines of fresh code and has the ability to steal 
data from forms, take screen shots to send back to the botmasters who deploy it, and 
create fake web pages. Pandemiya can be removed by tweaking registry and command 
line action. 

Source: 

http://www.theregister.co.uk/2014/06/13/pricey ground up built malware constantly 
infects everything/ 

22. June 13, Vallejo Times Herald - (California; Utah) San Jose: Utah woman indicted 
in embezzlement of $1.34 million from Mountain View software firm. A federal 
grand jury indicted a former Symantec Corp. employee June 11 on 26 charges of wire 
fraud and 10 counts of money laundering for allegedly embezzling $1.34 million in 
funds from the California-based company while working at its Lindon, Utah office 
between January 2010 and May 2012. The former employee allegedly charged 
unauthorized personal expenses to company payment cards and made unapproved 
financial transfers to a shell company used to reallocate funds into her personal bank 
account. 

Source: http://www.timesheraldonline.com/news/ci 25956029/san-iose-utah-woman- 
indicted-embezzlement- 1-34 



23. June 12, Securityweek - (International) Cisco fixes XSS vulnerability in AsyncOS 
management interface. Cisco advised customers to update their AsyncOS installations 
in order to address a cross-site scripting (XSS) vulnerability impacting the Web 
management interface of the operating system. The flaw affects Cisco Email Security 
Appliance (ESA) 8.0 and earlier, Cisco Web Security Appliance (WSA) 8.0 and earlier, 
as well as Content Security Management Appliance (SMA) 8.3 and earlier. 

Source: http://www.securitvweek.com/cisco-fixes-xss-vulnerabilitv-asyncos- 
management-interface 

24. June 12, Securityweek - (International) Cybercriminals targeting cloud-based PoS 
systems via browser attacks. IntelCrawler researchers dubbed a form of malware, 
POSCLOUD, which targets vulnerabilities in major Web browsers to compromise 
cloud-based PoS software typically used by grocery stores, retailers, and other small 
businesses. The malware relies on keylogging and screenshots to steal personal 
information and financial data. 

Source: http://www.securitvweek.com/attackers-targeting-cloud-based-pos-svstems- 
browser-attacks 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

25. June 12, WLTX 19 Columbia - (National) TWC’s Road Runner email service 
trouble widespread. Time Warner Cable representatives reported its Road Runner 
email service was down affecting 10 percent of its customers in cities across the U.S. 
for several days. The company stated the issues were intermittent and its engineers 
were working to restore service. 

Source: http://www.wltx.com/storv/tech/2014/06/12/twcs-road-runner-email-service- 
trouble- widespread/10389201/ 
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Commercial Facilities Sector 

26. June 13, WGCL 46 Atlanta - (Georgia) Driver crashes car through CNN Center 
lobby. Police arrested the driver of a vehicle that crashed into the lobby of the CNN 
Center in Atlanta June 13. No injuries were reported, and crews removed the car from 
the lobby while clearing the scene. 

Source: http://www.wfsb.com/story/25767980/driver-crashes-car-though-cnn-center- 
lobby 

27. June 13, KING 5 Seattle - (Washington) Early morning apartment fire displaces 91 
residents. Firefighters rescued six people from the Crestview Apartments complex in 
Federal Way, Washington, June 13 after a fire broke out in the kitchen of a unit and 
spread through the attic of the 27-unit structure. The fire displaced 91 residents. 

Source: http://www.king5.com/news/cities/federal-wav/Federal-Wav-apartment-fire— 
263004891.html 

28. June 12, KJRH 2 Tulsa - (Oklahoma) Gas line leak leads to evacuations in 
downtown Tulsa. A downtown Tulsa business was evacuated for about 2 hours June 
12 while Oklahoma Natural Gas workers patched a hole in a 2-inch gas line that was 
accidentally struck by construction crews that were digging up a sewer line. 

Source: http://www.fox23.com/news/local/story/Gas-line-leak-leads-to-evacuations-in- 
do wnto wn/oIbfzythwOiFU8QB J YKuhQ .cspx 

For additional stories, see items 16 and 24 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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